Archive
June 2007
Vulnerabilities first published in this month (UTC), newest first.
575 results · Feed
-
Unscored —
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which ca…
-
Unscored —
PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-de…
-
Unscored —CVE-2007-3003 Public exploit
Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-3000 Public exploit
Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-3006 Public exploit
Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .…
-
Unscored —
PHP JackKnife (PHPJK) allows remote attackers to obtain sensitive information via (1) a request to index.php with an in…
-
Unscored —CVE-2007-3009 Public exploit
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports …
-
Unscored —
Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote inf…
-
Unscored —CVE-2007-3001 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to inject arbitrary…
-
Unscored —CVE-2007-2872 Public exploit
Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attack…
-
Unscored —
Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.…
-
Unscored —
Unspecified vulnerability in sysmgt.websm.rte in IBM AIX 5.2.0 and 5.3.0 has unknown impact and attack vectors.
-
Unscored —
Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote …
-
Unscored —
Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messag…
-
Unscored —
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to exe…
-
Unscored —
The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before …
-
Unscored —
The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.…
-
Unscored —
The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to by…
-
Unscored —CVE-2007-2991 Public exploit
Cross-site scripting (XSS) vulnerability in includes/send.inc.php in Evenzia CMS allows remote attackers to inject arbi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (I…
-
Unscored —
Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31…
-
Unscored —
Novell GroupWise 7 before SP2 20070524, and GroupWise 6 before 6.5 post-SP6 20070522, allows remote attackers to obtain…
-
Unscored —
Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow r…
-
Unscored —
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to…
-
Unscored —
Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service (d…
-
Unscored —CVE-2007-2988 Public exploit
A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administr…
-
Unscored —
Multiple stack-based buffer overflows in the Media Technology Group CDPass ActiveX control in CDPass.dll allow remote a…
-
Unscored —
The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows r…
-
Unscored —
PHP remote file inclusion vulnerability in lib/live_status.lib.php in AdminBot MX 9.0.5 allows remote attackers to exec…
-
Unscored —CVE-2007-2985 Public exploit
Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's…
-
Unscored —
Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service (infinite loop and CPU c…
-
Unscored —CVE-2007-2971 Public exploit
SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Centrinity FirstClass 8.3 and earlier, and Server and Internet Services 8.0 and earlier, do not properly handle a URL w…
-
Unscored —
Multiple buffer overflows in a certain ActiveX control in odapi.dll in Authentium Command Antivirus before 4.93.8 allow…
-
Unscored —
The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of servi…
-
Unscored —
PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to …
-
Unscored —
Multiple buffer overflows in the British Telecommunications Business Connect webhelper ActiveX control before 1.0.0.7 i…
-
Unscored —CVE-2007-2981 Public exploit
Buffer overflow in a certain ActiveX control in LEAD Technologies LEADTOOLS Raster OCR Document Object Library (ltrdc14…
-
Unscored —
Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting t…